Application No.: 10/821,774 



Docket No.: 37202/136001 ;040098US 



AMENDMENTS TO THE SPECIFICATION 

Ple^e replace paragraph [0004] with the following paragraph: 

-[0004] Another approach to data recovery engineer access is through the use of public key 
encryption. In this example, the user password is initially encrypted with the software vendor's 
public key. The data recovery engineer would then use the software vendor's private key to decrypt 
the data and access the user's file to perform data recovery. In addition to identify fraud issues 
mentioned above, providing data recovery engineers the private key exposes the private key, raising 
other potential systemic security failure modes. In addition, this approach still exposes the entire 
database to the data recovery engineer, thereby compromising the privacy of the user's information. 

Please replace paragraph [0047] with the following paragraph: 

--[0047] The present invention also relates to an apparatus for performing the operations herein. 
This apparatus may be specially constructed for the required purposes, or it may comprise a general- 
purpose computer selectively activated or reconfigured by a computer program stored on a 
computer readable medium that can be accessed by the computer. Such a computer program may 
be stored in a computer readable storage medium, such as, but is not limited to, any type of disk 
including floppy disks, optical disks, CD-ROMs, magnetic-optical disks, read-only memories 
(ROMs), random access memories (RAMs), erasable programmable read only memories 
{EPROMs}, electrically erasable programmable read onlv memories ( EEPROMs), magnetic or 
optical cards, application specific integrated circuits (ASICs), or any type of media suitable for 
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storing electronic instructions, and each coupled to a computer system bus. Furthermore, the 
computers referred to in the specification may include a single processor or may be architectures 
employing multiple processor designs for increased computing capabiiity.-- 
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